Adaptive Network of Networks Architecture

ABSTRACT

In one embodiment, a composite Network of Networks is created out of a set otherwise separate constituent networks by a system that includes an operations station and one or more gateways. The operations station is configured to transmit a set of policies for processing data packets travelling through a composite network, where the composite network includes two or more independent constituent networks. The gateways are each communicatively connected between two or more attached constituent networks. A first gateway is configured to receive a data packet from a first constituent network attached to the first gateway; determine one or more real-time network situational awareness characteristics; process the data packet by applying the policies to the data packet based at least in part on the network situational awareness characteristics; and transmit the data packet to a second network attached to the first gateway and distinct from the first constituent network.

CROSS REFERENCE TO RELATED APPLICATIONS

This application claims the benefit of U.S. Provisional patentapplication Ser. No. 61/726,314, filed Nov. 14, 2012, the contents ofwhich are incorporated herein by reference thereto.

BACKGROUND

The present disclosure relates to networking and, more particularly, toforming a composite network of independent constituent networks treatedas point-to-point data links, described as a Network of Networks (NoN).

Many networks, particularly tactical networks, are disconnected fromother networks or points with which data might need to be exchanged. Forexample, the lack of connection may be due to variation in architecture,signaling structure, or internal format. In these cases, communicationbetween networks may be impossible or may require manual intervention.As a result, networks may be unable to communicate data to desiredlocations in an efficient and timely manner.

Gatewaying is a technique that can be employed to connect otherwisedissimilar networks. Gateways are normally one-to-one interfaces thatperform one or a combination of functions to include signalingconversion, format conversion, or other “bridging” functions. Forcomplex networks, however, a complex gateway architecture is required.In a prior attempted solution, an aerial gateway Battlefield AerialCommunications Node was established to provide a centralized (i.e.,hub-and-spoke) switchboard for transferring data between networks. Thissolution, however, is neither survivable nor scalable.

SUMMARY

In one embodiment, a system includes an operations station and one ormore gateways. The operations station is configured to transmit a set ofpolicies for processing data packets travelling through a compositenetwork, where the composite network includes two or more independentconstituent networks. The gateways are each communicatively connectedbetween two or more adjacent constituent networks, and each configuredto receive the policies from the operations station. A first gateway isconfigured to receive a data packet from a first constituent networkadjacent to the first gateway; determine one or more real-time networksituational awareness characteristics; process the data packet byapplying the policies to the data packet based at least in part on thenetwork situational awareness characteristics; and transmit the datapacket to a second network adjacent to the first gateway and distinctfrom the first constituent network.

In another embodiment, a computer-implemented method includesconfiguring an operations station to transmit a set of policies forprocessing data packets travelling through a composite network, wherethe composite network includes two or more independent constituentnetworks. One or more gateway devices are configured to communicate datathrough the composite network, and to receive the policies from theoperations station. A first gateway device is configured to receive adata packet from a first constituent network adjacent to the firstgateway device; determine one or more real-time network situationalawareness characteristics; process the data packet by applying thepolicies to the data packet based at least in part on the networksituational awareness characteristics; and transmit the data packet to asecond network adjacent to the first gateway device and distinct fromthe first constituent network.

In yet another embodiment, a computer program product includes anon-transitory computer readable storage medium having computer readableprogram code embodied thereon. The computer readable program code isexecutable by a processor to perform a method. The method includesconfiguring an operations station to transmit a set of policies forprocessing data packets travelling through a composite network, wherethe composite network includes two or more independent constituentnetworks. Further according to the method, one or more gateways areconfigured to communicate data through the composite network, and toreceive the policies from the operations station. A first gateway isconfigured to receive a data packet from a first constituent networkadjacent to the first gateway; determine one or more real-time networksituational awareness characteristics; process the data packet byapplying the policies to the data packet based at least in part on thenetwork situational awareness characteristics; and transmit the datapacket to a second network adjacent to the first gateway and distinctfrom the first constituent network.

Additional features and advantages are realized through the techniquesof this disclosure. Other embodiments and aspects of the disclosure aredescribed in detail herein and are considered a part of the claimedembodiments. For a better understanding of the various embodiments,refer to the description and to the drawings.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

For a more complete understanding of this disclosure, reference is nowmade to the following brief description, taken in connection with theaccompanying drawings and detailed description, wherein like referencenumerals represent like parts:

FIG. 1 illustrates a block diagram of an exemplary computer system foruse in implementing a networking system or method, according to someembodiments of this disclosure;

FIG. 2 is a block diagram of a networking system, according to someembodiments of this disclosure;

FIG. 3 is a block diagram of communications between an operationsstation and one or more gateways, according to some embodiments of thisdisclosure;

FIG. 4 is a block diagram illustrating data flow between variouscomponents of a composite network, according to some embodiments of thisdisclosure;

FIG. 5 is a block diagram of internal processes of a gateway, accordingto some embodiments of this disclosure; and

FIG. 6 is a more detailed block diagram of the gateway's internaloperations, according to some embodiments of this disclosure.

DETAILED DESCRIPTION

Various embodiments of a networking system provide centralizedmanagement input to a collection of decentralized gateways. Each gatewaymay include information about policies for handling data and passingdata between constituent networks, such that each constituent networkcan behave as a destination network or as routing network through whichdata can be passed on its way to its destination network.

FIG. 1 illustrates a block diagram of a computer system 100 for use inimplementing a networking system or method according to someembodiments. Aspects of the networking systems and methods describedherein may be implemented in hardware, software (e.g., firmware), or acombination thereof. In an exemplary embodiment, the methods describedmay be implemented, at least in part, in hardware and may be part of themicroprocessor of a special or general-purpose computer system 100, suchas an embedded computer, a personal computer, workstation, minicomputer,or mainframe computer.

In an exemplary embodiment, as shown in FIG. 1, the computer system 100includes a processor 105, memory 110 coupled to a memory controller 115,and one or more input and/or output (I/O) devices 140 and 145, such asperipherals, that are communicatively coupled via a local I/O controller135. The I/O controller 135 may be, for example but not limitation, oneor more buses or other wired or wireless connections, as are known inthe art. The I/O controller 135 may have additional elements, which areomitted for simplicity, such as controllers, buffers (caches), drivers,repeaters, and receivers, to enable communications.

The processor 105 is a hardware device for executing hardwareinstructions or software, particularly those stored in memory 110. Theprocessor 105 may be any custom made or commercially availableprocessor, a central processing unit (CPU), an auxiliary processor amongseveral processors associated with the computer system 100, asemiconductor based microprocessor (in the form of a microchip or chipset), a microprocessor, or other device for executing instructions. Theprocessor 105 includes a cache 170, which may include, but is notlimited to, an instruction cache to speed up executable instructionfetch, a data cache to speed up data fetch and store, and a translationlookaside buffer (TLB) used to speed up virtual-to-physical addresstranslation for both executable instructions and data. The cache 170 maybe organized as a hierarchy of more cache levels (L1, L2, etc.).

The memory 110 may include any one or combinations of volatile memoryelements (e.g., random access memory, RAM, such as DRAM, SRAM, SDRAM,etc.) and nonvolatile memory elements (e.g., ROM, erasable programmableread only memory (EPROM), electronically erasable programmable read onlymemory (EEPROM), programmable read only memory (PROM), tape, compactdisc read only memory (CD-ROM), disk, diskette, cartridge, cassette orthe like, etc.). Moreover, the memory 110 may incorporate electronic,magnetic, optical, or other types of storage media. Note that the memory110 may have a distributed architecture, where various components aresituated remote from one another but may be accessed by the processor105.

The instructions in memory 110 may include one or more separateprograms, each of which comprises an ordered listing of executableinstructions for implementing logical functions. In the example of FIG.1, the instructions in the memory 110 include a suitable operatingsystem (OS) 111. The operating system 111 essentially may control theexecution of other computer programs and provides scheduling,input-output control, file and data management, memory management, andcommunication control and related services.

Additional data, including, for example, instructions for the processor105 or other retrievable information, may be stored in storage 120,which may be a storage device such as a hard disk drive.

In an exemplary embodiment, a conventional keyboard 150 and mouse 155may be coupled to the I/O controller 135. Other output devices such asthe I/O devices 140 and 145 may include input devices, for example butnot limited to, a printer, a scanner, a microphone, and the like. TheI/O devices 140, 145 may further include devices that communicate bothinputs and outputs, for instance but not limited to, a network interfacecard (NIC) or modulator/demodulator (for accessing other files, devices,systems, or a network), a radio frequency (RF) or other transceiver, atelephonic interface, a bridge, a router, and the like.

The computer system 100 may further include a display controller 125coupled to a display 130. In an exemplary embodiment, the computersystem 100 may further include a network interface 160 for coupling to anetwork 165. The network 165 may be an IP-based network forcommunication between the computer system 100 and any external station,client and the like via a broadband connection, or for connection to oneor more tactical radios. The network 165 transmits and receives databetween the computer system 100 and external systems. In an exemplaryembodiment, the network 165 may be a managed IP network administered bya service provider, who may be, for example, military command personnel.The network 165 may be implemented in a wireless fashion, e.g., usingwireless protocols and technologies, such as WiFi, WiMax, etc. Thenetwork 165 may also be a packet-switched network such as a local areanetwork, wide area network, metropolitan area network, the Internet, orother similar type of network environment. The network 165 may be afixed wireless network, a wireless local area network (LAN), a wirelesswide area network (WAN) a personal area network (PAN), a virtual privatenetwork (VPN), intranet or other suitable network system and may includeequipment for receiving and transmitting signals.

Networking systems and methods according to this disclosure may beembodied, in whole or in part, in computer program products or incomputer systems 100, such as that illustrated in FIG. 1.

FIG. 2 is a block diagram of a networking system 200, according to someembodiments of this disclosure. As shown, the networking system 200 mayinclude an operations station 210, one or more gateways 220, and two ormore constituent networks 230. The operations station 210 may beembodied, in whole or in part, in a computer system 100 such as thatshown in FIG. 1. Likewise, each gateway 220 may be embodied, in whole orin part, in such a computer system 100. The constituent networks 230 mayeach be various types of networks including a variety of devices. By wayof the operations station 210 and the gateways 220, the networkingsystem 200 may provide a composite network 250 for transmitting databetween the devices of the various constituent networks 230, which maydiffer from one another in architecture, signaling structure, orinformation format.

Each constituent network 230 may be a network in its own right,including various nodes, or devices, between which data may be routed.For example, and not by way of limitation, a constituent network 230 maybe a theater area network, not owned or operated by a provider of thenetworking system 200 or by an administrator of the operations station210. The constituent networks 230 need not be of the same type and mayinclude various types of networks included in the composite network 250.The constituent networks 230 may include, for further example, networksusing Link-22, Situational Awareness Data Link (SADL), Link-16, TacticalTargeting Network Technology (TTNT), or Enhanced Position LocationReporting System (EPLRS). Accordingly, each constituent network 230 maybehave independently for data passed internally within that network 230,maintaining a high degree of autonomy and local control. The constituentnetworks 230 need not be required to change their architecture, design,or function to participate in the composite network 250. Further,communications between the various devices inside a constituent network230 may take many forms, dependent on the type of network theconstituent network 230 is and further dependent on the types of devicesinside the constituent network 230.

The networking system 200 may provide a unique architecture for acomposite network 250 of heterogeneous networks, where each constituentnetwork 230 is treated, in aggregate, as point-to-point connections forrouting data through the composite network 250. The gateways 220,positioned between each pair of adjacent networks 230, may be automated,thereby eliminating or reducing the need to manage the gateways 220individually. As a result, the networking system 200 may integrate thevarious constituent networks 230 into the composite network 250.

The operations station 210 may provide centralized planning for thenetworking system 200, including establishing policies, disseminatingthose policies to the gateways 220 for enforcement, and receivingnetwork situational awareness updates from the gateways 220.

In some embodiments, the operations station 210 may provide one or morepolicies for the gateways 220 to follow in routing data through thecomposite network 250. These policies may vary based on many factors andbased on specific implementation. The policies may include rulesregarding how data should be routed, where each rule may depend on, forexample, the type of data in question, the time of day, the types ofconstituent networks 230 involved, or various other factors. In general,the policies may be designed to route data efficiently through thecomposite network 250. Due to the policies being rules-based andevent-correlated, these policies may be machine-independent, enablingthe gateways 220 to use the same policies regardless of whichconstituent networks 230 are directly connected to each gateway 220. Thepolicies provided by the operations station 210 and enforced by thegateways 230 may improve scalability and flexibility for managingdistributed systems, as compared to existing art.

In some embodiments, the operations station 210 may include multiplecomputing devices, through which the various activities of theoperations station 210 are distributed. Additionally, in someembodiments, at least one additional station may be used as a backup. Inthat case, the operations station 210 may duplicate its data onto thebackup station, so the backup station can take over if the operationsstation 210 becomes inoperable or experiences service problems.

FIG. 3 is a block diagram of communications between the operationsstation 210 and the gateways 220. The operations station 210 may beresponsible for overall configuration and management of the compositenetwork 250, and may also include a terminal where a human administratorcan control and monitor the composite network 250. To this end, theoperations station 210 may handle one or more of the followingactivities for the composite network 250: network management,policy-based network management (PBNM), situational awareness (SA)processing, policy management, execution of manual overrides,confirmations to the various gateways 220, bringing gateways 220 onlineand offline as needed.

The gateways, located communicatively between the constituent networks230, may be responsible for translating and routing data and for makingand enforcing decisions based on the policies handed down by theoperations station 210. To this end, the gateways 220 may handle one ormore of the following activities for handling network traffic, in orderto maintain their role as policy decision and enforcement points:message translation, address translation, load balancing, intelligentlink selection, intelligent routing, traffic prioritization, datamanagement, and security functions.

As shown, the gateways 220 may receive policies from the operationsstation 210 and communicate policy feedback and situational awarenessdata back to the operations station 210. In some embodiments, theoperations station 210 need not be continuously connected to thenetworks, enabling the gateways 220 to operate independently from theoperations station 210 and free of manual intervention. Policy feedbackmay include, for example, data related to the effects of the policies orerror messages regarding enforcement of the policies. Networksituational awareness data may include, for example, current speeds ofdata transmission and the real-time position of the gateway 220, whichmay or may not be aerial or otherwise mobile. The gateways 220 may alsocommunicate with one another, as will be discussed further below. Forexample, as shown, the gateways 220 may exchange information about datarouting.

Additionally, as shown, a backup station 310 may be in communicationwith the operations station 210. As discussed above, data on theoperations station 210 may be duplicated onto the backup station 310, sothat the backup station 310 can replace the operations station 210 ifneeded.

In some embodiments, the gateways 220 need not have integrated radios.Thus, gateways 220 may be connected to one another and to the operationsstation 210 by various external mechanisms. For example, a gateway 220may be in communication with a radio, LAN, or other connectivity device.An inline network encryptor (INE) may be connected between a gateway 220and its associated radio or network, so as to encrypt communicationsbetween gateways 220. Alternatively, a radio may have built-inencryption, in which case an INE may not be needed. In some embodiments,a gateway 220 may be connected to multiple radios, or networks, enablingthe gateway 220 to communicate over multiple constituent networks 230that may not otherwise have digital compatibility except through thatgateway 220.

FIG. 4 is a second block diagram illustrating how data may flow betweenvarious components of the composite network 250, according to someembodiments. Although only two gateways 220 are shown in FIGS. 3-4, itwill be understood that these two may be representative of the one ormore gateways 220 used to facilitate operations of the composite network250.

As shown in FIG. 4, the operations station 210 and a gateway 220 mayeach have a set of functional levels or planes, where each planerepresents as type of operation performed. Each of these planes mayinclude hardware, software, or a combination of both. It will beunderstood that the planes are provided in FIG. 4 for illustrativepurposes only, and further that, in some implementations, the operationsstation 210 or a gateway 220 may share hardware across its planes.

In some embodiments, the operations station 210 may include a Network ofNetworks (NoN) policy management plane configured to manage policies forthe composite network 250, and a gateway management plane configured tomanage the gateways 220. The NoN policy management plane may include amission planning tool and a real-time NoN manager. The mission planningtool may build and disseminate initial gateway configurations, and thereal-time NoN manager may provide a dynamic view of the compositenetwork 250, including connectivity lines, geographic positions, andgateway health. The gateway management plane may include a policymanagement station configured to disseminate policies to the gateways220.

Each gateway 220 may include a policy-based management plane, a gatewaycontrol plane, and a data flow plane. The policy-based management planemay include a policy management entity (PME) responsible for receivingand processing policies from the policy management plane, and for makingdecisions based on current situations to enforce the policies. Thegateway control plane may include a gateway manager responsible forsituational awareness, health discovery and reporting, routing protocoloverhead, and neighbor discovery. The data flow plane may be responsiblefor the actual translation, quality of service (QoS), and forwarding ofdata payloads and internally generated data.

As shown, the NoN policy management plane of the operations station 210may be in communication with the policy-based management planes of thevarious gateways 220, so as to exchange information about policies. Thegateway management plane of the operations station 210 may be incommunication with the gateway control plane of the various gateways220, so as to communicate various information, such as initialconfiguration, manual overrides, and other gateway controls. Thegateways 220 may provide the operations station 210 with networksituational awareness and other management information. The data flowplanes of the gateways 220 may communicate with one another, for thepurpose of passing actual data message payloads.

FIG. 5 is a diagram of internal processes of a gateway 220, according tosome embodiments, representative of the various gateways 220 in thecomposite network 250. As shown, the gateway 220 may communicate datafrom one constituent network 230 to another.

Together, the gateways 220 in the composite network 250 may manage andcontrol the flow of data between the constituent networks 230 in a waydeemed to be optimal. They may facilitate the working of the compositenetwork 250 by providing their own self-forming, self-healing mobilead-hoc network (MANET) among the gateways 220, treating each constituentnetwork 230, as needed, as a point-to-point connection between thegateways 220. The gateways 220 may be automated based on the policiesprovided by the operations station 210, thereby reducing or eliminatingthe need for individual gateway management.

Gateways 220 at the intersection of the constituent networks 230 maycommunicate with one another using a MANET protocol that enables them toexchange neighbor relationship information and form localized or globalrouting tables to ensure optimal forwarding of user information packetsbetween gateways 220, and further to determine whether a local gateway220 is the last gateway 220 (i.e., the one directly connected to theconstituent network 230 of the final destination). The gateways 220 maysupport unicast, multicast, broadcast, anycast, or a combination ofthese.

Among other tasks, the gateways 220 may be responsible for messagetranslation and forwarding. The gateways 220 may break down informationstovepipes at the edges of constituent networks 230, such as byrepackaging and transcoding. The gateways 220 may be capable of neighbordiscovery, by which they can find one another in the dynamic environmentto enable coordination and integration. They may be configured tointelligent load balancing, enabling an effective use of bandwidth. Insome embodiments, the gateways 220 may control the flow of data in partusing data thinning and other techniques between high- andlow-throughput links, thereby enabling data to flow efficiently betweenand through the constituent networks 230. Intelligent data linkselection may be used so that the resulting routes are suited to thedata being routed, including the destination and format of that data.The gateways 220 may be further enabled to optimize data based on thedata content, format, and destination. As a result, using the policiespassed down from the operations station 210, the gateways 220 may movedata through the composite network 250 in an intelligent manner, basedon real-time situations and data attributes.

Each gateway 220 may be connected, directly or indirectly (via some formof communication device, such as a network interface, serial interface,or data bus, for example) to a radio or a network interface device 510for communication with each constituent network 230 the gateway 220touches. In some cases, a gateway 220 may use the same network interfacedevice 510 to communicate with multiple attached constituent networks230. In some other cases, however, a communication interface device 510may be needed for each distinct constituent network 230. Because aconstituent network 230 is internally connected as well, the gateway 220may thus be in communication with all devices 510 in the constituentnetworks 230, either directly or indirectly. Accordingly, the gateway220 may receive data from a first device 510 in a first constituentnetwork 230 to which it is adjacent, and communicate that data to asecond device 510 in a second constituent network 230 to which it isadjacent. Further, as the various gateways 220 of the composite network250 may be in communication with one another, the gateway 220 mayadditionally act as intermediaries in communicating data across theconstituent networks 230 of the entire composite network 250.

As shown in FIG. 5, when data is received at the gateway 220, thegateway 220 may perform activities related to ingress processing, coreprocessing, and egress processing. After the egress processing isperformed, the gateway 220 may transmit the processed data to a device510 in one of its adjacent constituent networks 230.

FIG. 6 is a more detailed diagram of the gateway's internal operations,according to some embodiments. As shown, the ingress processing mayinclude IP header processing for data received from IP radios, andtranslation to a gateway-internal representation for data received fromIP radios, non-IP radios, or both. The gateway 220 may encapsulate thedatagrams from non-IP radios into IP datagrams, with associated IPheaders created to match. Thus, the translation into an IP-basedinternal representation may enable the data to be processed usingstandards common across the composite network 250. More specifically, insome embodiments, the internal representation used may be an IP/XMLformat. Additionally, during ingress processing, aconstituent-network-specific address may be converted into a NoN-widevirtual address, resulting in an gateway-native datagram.

During core processing, the gateway 220 may perform packetcategorization and route selection. During the route selection, thegateway 220 may consider various factors related to the category ofpacket being processed, current conditions, and network policies. Thegateway 220 may additionally consider the data packet's finaldestination, including whether the destination device 510 is in adirectly connected constituent network 230 (i.e., the “to” network) orin a constituent network 230 that requires the gateway 220 to route thedata through one of its directly constituent networks (i.e., in thatcase, a “through” network) to another gateway 220. If the currentgateway 220 determines that it should route the data to another gateway220, using an adjacent constituent network 230 as a “through” network,the gateway 220 may then select a routing destination deemed suited forrouting the data through its constituent network 230 toward the nextgateway 220.

During egress processing, the gateway 230 may perform variousactivities, including, for example, thinning, encapsulating the data asneeded, translation, and QoS enforcement as needed. During thinning, thegateway 220 may process the data so as to make it more suitable forbeing passed across a lower-throughput network. This may be performed ifthe constituent network 230 “to” or “through” which the data is to berouted is deemed to have low available throughput relative to therequired data rate. Thinning may include, for example, discardingportions of the data that are not needed for understanding of the databy the eventual final destination device 510. The encapsulation may beperformed for data that is to be routed through, as opposed to “to,” anadjacent constituent network 230. This may include transforming the datainto an internal representation understandable by the net gateway 220,as the various devices 510 between the current gateway 220 and the nextgateway 220 need not read the actual data payload. For data being passed“to,” as opposed to “through,” an adjacent directly connectedconstituent network 230, the gateway 220 may translate the data from itsinternal representation to a representation native to the adjacentconstituent network 230. In this case, encapsulation need not be usedbecause the gateways 220 may deliver the data in the format, and withthe structure, native to the directly connected constituent network 230.After such encapsulation or translation, if needed, is performed, thegateway 220 may perform QoS enforcement if needed.

Upon receiving data from a gateway 220, a constituent network 230 mayperform as usual per its internal policies, which may be independentfrom policies used by the networking system 200. Because the datareceived from the gateway 220 may already be in the constituentnetwork's native format if the constituent network 230 is thedestination network 230, the various devices 510 within the constituentnetwork 230 need not be aware of their role in the composite network250. Rather, they may simply route the data to the destination device asthey normally would. As a result, the data may reach its destinationinside the constituent network 230 or may travel through the constituentnetwork 230 to the next gateway 220, as per routing instructions fromthe gateway 220. Further, by chaining gateways 220 together, using theconstituent network 230 as data links, the networking system 200 mayenable data to be passed across one or more gateways 220 from a firstdevice 510 in one constituent network 230 to a second device 510 in someother constituent network 230.

As a result of the above, the networking system 200 may provide anefficient mechanism for data to be passed between constituent networks230 that may otherwise be unable to communicate with one another due todiffering internal designs or differing architectures.

The corresponding structures, materials, acts, and equivalents of allmeans or step plus function elements in the claims below are intended toinclude any structure, material, or act for performing the function incombination with other claimed elements as specifically claimed. Thedescription of the various embodiments has been presented for purposesof illustration and description, but is not intended to be exhaustive orlimited to the forms disclosed. Many modifications and variations willbe apparent to those of ordinary skill in the art without departing fromthe scope and spirit of this disclosure. The embodiments were chosen anddescribed to best explain the principles of the various embodiments andthe practical applications, and to enable others of ordinary skill inthe art to understand the embodiments with various modifications as aresuited to the particular use contemplated.

While some embodiments have been described, it will be understood thatthose skilled in the art, both now and in the future, may makeimprovements and enhancements that fall within the scope of the claimsthat follow. These claims should be construed to maintain the properprotection for the embodiments first described.

What is claimed is:
 1. A system comprising: an operations stationconfigured to transmit a set of policies for processing data packetstravelling through a composite network, the composite network comprisingtwo or more independent constituent networks; and one or more gateways,each communicatively connected between two or more constituent networksattached to the gateway, and each configured to receive the policiesfrom the operations station, wherein a first gateway is furtherconfigured to: receive a data packet from a first constituent networkattached to the first gateway; determine one or more real-time networksituational awareness characteristics; process the data packet byapplying the policies to the data packet based at least in part on thenetwork situational awareness characteristics; and transmit the datapacket to a second network attached to the first gateway and distinctfrom the first constituent network.
 2. The system of claim 1, whereinthe one or more gateways comprise at least two gateways connected to oneanother by way of the constituent networks, and wherein the operationsstation is configured to provide centralized management input to thegateways.
 3. The system of claim 1, wherein the first gateway is furtherconfigured to: determine whether a destination device for the datapacket is in the second constituent network; and translate the datapacket into a format native to the second constituent network if thedestination device is in the second constituent network.
 4. The systemof claim 1, wherein the first gateway is configured to use the secondconstituent network as a data link to communicate the data packet to asecond gateway among the one or more gateways.
 5. The system of claim 4,wherein the first gateway is further configured to: determine whether adestination device for the data packet is in the second constituentnetwork; and encapsulate the data packet into a format compatible withthe second constituent network and transmit the data packet to thesecond gateway if the destination device is not in the secondconstituent network.
 6. The system of claim 1, wherein the one or moregateways are configured to communicate the data packet from a firstdevice in an origination constituent network to a second device in adestination constituent network.
 7. The system of claim 1, wherein thefirst gateway is connected to the first constituent network through afirst radio and to the second constituent network through a secondradio, and wherein the first radio and the second radio are incompatibleor on separate networks.
 8. The system of claim 1, wherein the firstgateway is further configured to convert a destination address of thedata packet to a virtual address that is unique among devices in thecomposite network.
 9. The system of claim 1, wherein the first gatewayis further configured to determine whether to perform thinning on thedata packet if the second constituent network has a lower throughputthan the first constituent network.
 10. The system of claim 1, whereinthe one or more gateways are further configured to transmit to theoperations station at least one of feedback regarding enforcement of thepolicies and situational awareness data.
 11. A computer-implementedmethod, comprising: configuring an operations station to transmit a setof policies for processing data packets travelling through a compositenetwork, the composite network comprising two or more independentconstituent networks; and configuring one or more gateway devices tocommunicate data through the composite network and to receive thepolicies from the operations station, comprising configuring a firstgateway device to: receive a data packet from a first constituentnetwork attached to the first gateway device; determine one or morereal-time network situational awareness characteristics; process thedata packet by applying the policies to the data packet based at leastin part on the network situational awareness characteristics; andtransmit the data packet to a second network attached to the firstgateway device and distinct from the first constituent network.
 12. Themethod of claim 11, wherein the one or more gateway devices comprise atleast two gateway devices connected to one another by way of theconstituent networks, and wherein the operations station is configuredto provide centralized management input to the gateway devices.
 13. Themethod of claim 11, further comprising configuring the first gatewaydevice to: determine whether a destination device for the data packet isin the second constituent network; and translate the data packet into aformat native to the second constituent network if the destinationdevice is in the second constituent network.
 14. The method of claim 11,wherein the first gateway device is configured to use the secondconstituent network as a data link to communicate the data packet to asecond gateway device among the one or more gateway devices.
 15. Themethod of claim 11, further comprising configuring the first gatewaydevice to convert a destination address of the data packet to a virtualnetwork address that is unique among potential destination devices inthe composite network.
 16. A computer program product comprising anon-transitory computer readable storage medium having computer readableprogram code embodied thereon, the computer readable program codeexecutable by a processor to perform a method comprising: configuring anoperations station to transmit a set of policies for processing datapackets travelling through a composite network, the composite networkcomprising two or more independent constituent networks; andtransmitting the policies over the composite network to one or moregateways; configuring the one or more gateways to communicate datathrough the composite network and to receive the policies from theoperations station, comprising configuring a first gateway to: receive adata packet from a first constituent network attached to the firstgateway; determine one or more real-time network situational awarenesscharacteristics; process the data packet by applying the policies to thedata packet based at least in part on the network situational awarenesscharacteristics; and transmit the data packet to a second networkattached to the first gateway and distinct from the first constituentnetwork.
 17. The computer program product of claim 16, wherein the oneor more gateways comprise at least two gateways connected to one anotherby way of the constituent networks, and wherein the operations stationis configured to provide centralized management input to the gateways.18. The computer program product of claim 16, further comprisingconfiguring the first gateway to: determine whether a destination devicefor the data packet is in the second constituent network; and translatethe data packet into a format native to the second constituent networkif the destination device is in the second constituent network.
 19. Thecomputer program product of claim 16, wherein the first gateway isconfigured to use the second constituent network as a data link tocommunicate the data packet to a second gateway among the one or moregateways.
 20. The computer program product of claim 16, furthercomprising configuring the first gateway to convert a destinationaddress of the data packet to a virtual network address that is uniqueamong potential destination devices in the composite network.